Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/UIGP_GlcmfTTUDj9O1pF24NFn7k.roa
File: UIGP_GlcmfTTUDj9O1pF24NFn7k.roa (raw, json)
Hash identifier: bkXnBflYMCtu+iSEIzIJqM0NhmpFplO4gxQifzNYLj0=
Subject key identifier: 50:81:8F:FC:69:5C:99:F4:D3:50:38:FD:3B:5A:45:DB:83:45:9F:B9
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018CC2DB03C491CEFF30B6A518B382533290
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/UIGP_GlcmfTTUDj9O1pF24NFn7k.roa
Signing time: Mon 01 Jan 2024 02:29:42 +0000
ROA not before: Mon 01 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399498
IP address blocks: 45.86.188.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 18:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:03:c4:91:ce:ff:30:b6:a5:18:b3:82:53:32:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50818ffc695c99f4d35038fd3b5a45db83459fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:69:19:55:b7:c7:d8:7f:a6:68:1a:53:a3:
3a:de:33:26:a5:1c:18:96:e3:3b:20:3a:a4:32:5a:
7f:13:c5:36:88:37:98:37:5e:a3:70:bd:5d:d4:ca:
d6:2b:1f:fd:22:90:23:0d:5f:a2:2b:bd:3d:2d:ea:
22:48:91:01:ec:47:ea:f0:57:0a:6c:2d:da:d8:2e:
e5:9e:ee:2f:a9:80:4e:9b:2a:91:3e:ce:a2:9e:fd:
a3:5e:46:30:ae:21:8e:be:f3:7f:a6:d2:c2:54:91:
5e:92:7e:35:15:44:32:9c:44:ef:29:96:27:32:a1:
11:ba:43:3b:28:03:0c:6a:ed:e7:44:bc:b1:58:6a:
8f:fe:00:5f:2a:cf:54:d4:2d:40:2b:04:bd:ed:42:
f9:2b:be:db:f9:33:a0:85:4e:f0:3a:11:44:bb:b1:
c3:06:16:12:25:b2:2e:99:15:88:fd:ce:a2:09:21:
0a:bc:0b:9a:e5:59:e0:e7:2a:05:96:a8:59:2e:e1:
18:ea:02:d4:b7:8e:57:64:48:a2:f6:1e:5e:f7:86:
e7:e1:34:46:32:38:09:92:41:61:c8:bf:f4:72:4c:
35:86:75:ce:6a:31:eb:ad:ea:a6:e3:95:e0:81:b4:
20:6b:23:29:78:a2:9d:fe:60:67:83:79:b6:36:1f:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:81:8F:FC:69:5C:99:F4:D3:50:38:FD:3B:5A:45:DB:83:45:9F:B9
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/UIGP_GlcmfTTUDj9O1pF24NFn7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.188.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:9b:21:98:9c:c6:a9:c8:04:e1:c9:9e:44:a8:8a:16:96:cd:
d1:e5:ee:51:ae:bc:8e:e7:99:f4:f9:7f:78:c6:76:ee:f3:d5:
38:a6:e4:4e:15:bd:51:06:53:08:5d:21:c5:20:32:33:f4:cb:
44:87:74:67:10:55:ec:6d:d4:5b:4e:46:71:72:29:de:d1:1f:
eb:b0:66:21:6e:06:0b:f7:75:9d:6f:ae:d5:97:04:18:2f:f0:
30:83:9b:73:50:ac:c5:07:4d:cb:ec:d9:5f:b9:a7:97:7a:1e:
86:b7:52:59:3f:91:ac:42:e6:13:77:20:63:cc:6f:ab:e9:81:
b3:19:0a:15:b1:20:5f:e2:f9:88:f9:03:7e:87:ab:9a:ba:3a:
68:4c:e1:b9:b3:7f:2a:a5:1b:cd:77:eb:82:7b:b1:15:64:9e:
cf:cb:56:91:e4:7f:b9:0c:7e:75:8b:40:00:f2:0d:1a:e0:24:
ec:91:55:da:e4:8e:94:c6:dd:09:c8:2f:4a:6c:79:01:06:53:
7b:c7:29:fd:79:8e:30:2e:47:d2:3f:05:bb:c9:74:de:69:7d:
3e:50:be:ca:9d:17:b9:5c:52:c5:c4:ea:dd:a9:69:99:b1:9c:
49:2f:12:f9:7e:e9:78:2e:36:d2:33:31:70:70:0e:d9:21:f0:
57:d6:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:19 2025 by rpki-client